Trojan horse disguised as message from SecurityFocus and TrendMicro
by SecurityFocus
An e-mail message claiming to come from the SecurityFocus ARIS Analyst Team and TrendMicro is being used to deliver what appears to be a Trojan horse to unsuspecting users.
Do not run this attachment. These messages do not come from TrendMicro or SecurityFocus, as a quick check of the headers will reveal.
The e-mail message comes with an executable attachment named FIX_NIMDA.exe. The name is similar to the one used by TrendMicro for their free Nimda removal tool (FIX_NIMDA.com).
Last night, SecurityFocus sent e-mails to its global distribution list to alert users of the fakery. Below is a link to an example of the false e-mail, as well as the recommended patch.
SecurityFocus will never send executable attachments claiming to be a fix to any worm or vulnerability. If you have received a similar message we would like to hear from you.
Common sense and best practices indicates that you should not execute any code that is delivered via email unless you can authenticate the source of the message.
A link to the message is given in the Incidents Mailing List Archive:
http://www.securityfocus.com/archive/75/217456
Thanks for your time,
Elias Levy
CTO SecurityFocus
aleph1@securityfocus.com
In Basics:
Introduction to Security Policies, Part Three: Structuring Security Policies
by Charl van der Walt
This is the third in a four-part overview of security policies. In the first article, we looked at what policies are and what they can achieve. In the second article, we looked at the organizational support required to implement security policies successfully. In this installment, we shall discuss how to develop and structure a security policy.
|
 |
|
|
|
|
 by Tim Mullen
The Gartner Group recommends dumping Microsoft's web server software for 'alternatives.' What are they smoking?
|
Front Page
|
 |
Basics
|
|
Unix
|
|
Virus
|
|
Info.sec.radio broadcast October 1, 2001.
Realizing Electronic Notaries
|
|
|
|
Bugtraq
| Mailing Lists
| Library
